7z

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the 7z utility for archive management and includes installation scripts (scripts/install.sh and scripts/install.ps1) that utilize system package managers such as apt, dnf, brew, and winget.
  • [EXTERNAL_DOWNLOADS]: The skill references official sources (7-zip.org) and well-known package registries for downloading the necessary binaries and source code.
  • [PRIVILEGE_ESCALATION]: The scripts/install.ps1 script uses sudo for Linux package installation tasks, which is standard procedure for system-level tool provisioning.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external archive files that could potentially contain path traversal sequences.
  • Ingestion points: Archive files processed via 7z x (SKILL.md, references/troubleshooting.md)
  • Boundary markers: The documentation recommends using explicit output directories (-o) to isolate extraction.
  • Capability inventory: Execution of the 7z binary for extraction and listing (SKILL.md).
  • Sanitization: The skill provides specific instructions and a validation script to inspect archives for suspicious paths (.. or absolute paths) before extraction.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 04:17 PM
Security Audit — agent-trust-hub — 7z